Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3133382e39372e35362e302f32322d3234203d3e203133343839.roa
File:                     3133382e39372e35362e302f32322d3234203d3e203133343839.roa (raw, json)
Hash identifier:          scCA3if8s8ZPxtxJ3k8SCQFf+bTMxEgQ3ybIjtzXN+M=
Subject key identifier:   9D:5A:BD:A6:6E:27:81:1F:BB:EE:26:A8:17:E5:94:57:52:E3:4A:2A
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       4B6CBA3BCCA850539BDC1666478817C801408062
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3133382e39372e35362e302f32322d3234203d3e203133343839.roa
Signing time:             Wed 24 Jun 2026 12:25:00 +0000
ROA not before:           Wed 24 Jun 2026 12:20:00 +0000
ROA not after:            Wed 23 Jun 2027 12:25:00 +0000
asID:                     13489
IP address blocks:        138.97.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 27 Jul 2026 18:06:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:6c:ba:3b:cc:a8:50:53:9b:dc:16:66:47:88:17:c8:01:40:80:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Jun 24 12:20:00 2026 GMT
            Not After : Jun 23 12:25:00 2027 GMT
        Subject: CN=9D5ABDA66E27811FBBEE26A817E5945752E34A2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f2:2d:36:2e:08:fe:00:9d:8c:58:1c:9b:2e:
                    61:e5:16:16:bd:74:82:bc:45:7c:9a:de:8b:38:c5:
                    c9:cb:61:60:a9:19:d4:1a:bc:cf:95:e6:d3:5c:5a:
                    50:ab:05:6b:c7:26:25:e3:90:94:8d:3b:8b:25:6a:
                    cf:6b:2b:72:2f:73:c8:5a:a6:78:39:c9:ce:db:0d:
                    e1:ba:fe:83:b0:57:13:b7:eb:93:f3:4f:0e:aa:77:
                    a8:58:a8:ff:b0:d0:03:69:e0:04:6c:eb:3d:6b:57:
                    39:b5:e6:9c:31:0f:60:91:c0:b2:0e:c7:dc:b1:47:
                    ba:e8:7d:fe:f7:37:ef:d2:f7:9e:a0:e2:38:16:53:
                    dd:3e:7d:01:42:1f:ed:cc:0c:25:46:18:bd:a6:a2:
                    e5:eb:62:0c:fc:e2:3a:0b:ef:26:26:95:71:a1:ff:
                    57:b9:17:d6:57:10:b6:78:2a:31:6a:0b:24:49:b5:
                    f2:31:1e:85:df:c0:7e:84:0a:c3:84:bc:c7:9f:2f:
                    79:8a:82:7f:ac:f3:db:bf:88:87:c4:89:1c:11:a2:
                    5b:3c:96:b5:42:f5:dd:c8:35:7a:c5:2b:83:45:ab:
                    f8:1b:99:00:fa:03:a0:65:31:23:00:e6:e2:49:b8:
                    03:a3:2e:4b:ea:79:12:2e:db:b2:1b:01:de:55:91:
                    22:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:5A:BD:A6:6E:27:81:1F:BB:EE:26:A8:17:E5:94:57:52:E3:4A:2A
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3133382e39372e35362e302f32322d3234203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:22:8e:59:95:8d:fd:0c:f1:49:aa:0f:4d:74:39:98:93:db:
         3e:74:ec:6e:4d:b0:ce:52:99:d9:58:ef:db:4c:db:88:f1:0c:
         ef:12:17:15:9c:20:e8:0f:98:69:f1:c8:12:d5:ff:ec:23:e3:
         da:0c:3a:74:9f:ad:0a:b8:ad:9d:5a:7e:71:fc:a9:31:c3:e3:
         06:a3:88:d3:99:6b:78:c6:cf:39:da:44:63:da:e6:4e:b8:1b:
         f7:54:0d:a8:78:49:11:f1:94:2b:fc:27:c2:23:9b:ab:39:f3:
         a8:99:47:c8:f2:12:a6:e6:b4:d2:57:df:20:93:15:4f:35:c5:
         c5:ec:46:9e:e2:71:0b:b9:af:76:a1:e7:e7:51:00:a0:a6:9a:
         35:19:43:55:91:72:7a:cc:52:8d:16:02:7c:4c:ea:26:d8:63:
         5f:06:4a:2c:20:f4:cb:98:8b:ce:8c:17:a5:39:31:e6:9e:12:
         e0:88:0d:7c:de:f1:b6:13:89:33:08:38:0b:2e:53:42:bd:28:
         1f:25:c8:c6:f8:2e:37:f5:89:95:3b:8c:13:b4:0c:15:57:e1:
         8c:c5:90:4d:46:89:95:6c:5e:c6:17:a1:c4:9f:9c:18:11:77:
         10:df:39:a4:1e:4b:e4:36:ca:95:a0:48:84:1d:f5:ed:d3:55:
         25:ec:e9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:34:57 2026 by rpki-client